p PatchFirst

PatchFirst · Latest vulnerabilities

python-pypdf vulnerabilities

Vulnerabilities published for python-pypdf in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 5

  1. CVE-2026-54651

    Medium · CVSS 6.9EPSS 0.16%No fix published

    pypdf: Possible infinite loop when processing threads/articles in writer

    pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with threads/articles into a writer. This vulnerability is fixed in 6.13.1.

    python-pypdfOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2026-49460

    Medium · CVSS 5.1EPSS 0.17%No fix published

    pypdf: Inefficient decoding of FlateDecode PNG predictor streams

    pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /FlateDecode filter with a PNG predictor. This vulnerability is fixed in 6.12.2.

    python-pypdfOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  3. CVE-2026-49461

    Medium · CVSS 6.9EPSS 0.17%No fix published

    pypdf: Possible large memory usage for form XObjects during text extraction

    pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting the text of a page which contains a form XObject with self-references. This vulnerability is fixed in 6.12.2.

    python-pypdfOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2026-54531

    Medium · CVSS 6.9EPSS 0.17%No fix published

    pypdf: Possible infinite loop when processing outlines/bookmarks in writer

    pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with outlines into a writer. This vulnerability is fixed in 6.13.0.

    python-pypdfOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  5. CVE-2026-54530

    Medium · CVSS 6.9EPSS 0.17%No fix published

    pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction

    pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnerability is fixed in 6.13.0.

    python-pypdfOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →